https://bugzilla.redhat.com/show_bug.cgi?id=2138353
--- Comment #17 from rhtse tse@ribose.com --- We have made the following PRs in the upstream repository, that will be merged in a few hours: * "Add MIT license for sha1 collision detection code" https://github.com/rnpgp/rnp/pull/1933 * "Clarify status of OCB license" https://github.com/rnpgp/rnp/pull/1936